Nagios Support Forum

Hello - I was just wondering if there was formal guidance on restricting access to the web interfaces (nagiosxi, nagios, nrdp, nagvis) by ip & host/domain name. I know that I can restrict it in the httpd configs using the Required host & Required ip options.
If this is the best way to do it, I'm wondering if there are any gotchas.

Thanks!

One gotcha I can think of is that passive checks come in to the HTTP server over the same port and web server that the Nagios XI web interface is running on; if you restrict the IP addresses that can access the HTTP site, you may have to also allow from the IP addresses of the hosts sending passive checks.

If you're not using passive checks, this point is moot though.